$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS213707.roa File: AS213707.roa (raw, json) Hash identifier: xSGlILCZkt5lfGqLJFODzDWMZq1yersgwv98k/BVAoc= Subject key identifier: 70:15:91:BA:A7:D3:AA:B7:53:98:95:A3:42:C1:37:85:D9:70:CB:CD Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 619628EE4B8359CF4B098B2768FB7EAA7B02A684 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS213707.roa Signing time: Sun 28 Jun 2026 18:58:15 +0000 ROA not before: Sun 28 Jun 2026 18:53:15 +0000 ROA not after: Sun 27 Jun 2027 18:58:15 +0000 asID: 213707 IP address blocks: 2a0a:6044:6c00::/40 maxlen: 40 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Jul 2026 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:96:28:ee:4b:83:59:cf:4b:09:8b:27:68:fb:7e:aa:7b:02:a6:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jun 28 18:53:15 2026 GMT Not After : Jun 27 18:58:15 2027 GMT Subject: CN=701591BAA7D3AAB7539895A342C13785D970CBCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:55:e6:6c:49:71:4c:ac:5d:43:55:45:5d:84: 19:e6:92:ba:04:2d:87:49:2e:60:68:32:d5:ff:7a: 26:ca:a2:f0:14:a0:ef:a3:c5:50:ee:23:be:c6:c3: 4c:42:f6:03:c2:da:39:b5:fa:eb:a9:d3:d3:e6:96: 3a:f5:ea:f2:c5:83:28:69:4b:d4:22:59:3c:42:fb: c6:0a:5f:22:b7:18:b1:9c:3a:cd:bb:d9:c9:9c:5f: 96:cf:5a:72:3d:84:06:05:06:51:c8:a2:93:ef:6e: 1f:7e:8d:e6:02:68:f9:0f:85:bc:cc:ce:dd:fb:e3: a9:b1:cd:2b:ac:8e:67:ce:d9:d5:1f:b1:e3:f6:58: 05:73:de:7c:a7:46:22:73:94:36:ec:40:a9:4e:d2: c0:76:fa:9e:68:ca:83:da:70:a2:5e:3a:61:13:dd: 32:8a:c5:97:19:f2:bd:9d:66:2d:d6:08:dd:95:70: ca:89:c4:ee:dc:1f:94:4f:b9:7a:0a:e3:bb:ce:11: 3f:c1:60:b7:6d:26:84:5d:70:0c:29:1e:0a:b9:51: 56:1b:8f:35:20:47:70:b5:eb:e0:bc:a9:ef:36:27: 70:8e:fd:69:9e:f7:f5:16:5f:c5:cf:4c:0e:8f:d7: f8:fa:31:da:6f:6b:5e:37:ff:32:e7:8c:c4:26:68: 37:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:15:91:BA:A7:D3:AA:B7:53:98:95:A3:42:C1:37:85:D9:70:CB:CD X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS213707.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:6c00::/40 Signature Algorithm: sha256WithRSAEncryption 1e:1b:1d:25:aa:37:9b:06:5a:92:92:79:95:ea:3c:8f:4d:7f: 20:6a:03:bd:d2:01:93:7b:03:b9:b7:d2:81:ed:0c:84:c5:8f: 23:74:a9:65:0f:45:ac:6c:0c:6e:d3:82:9d:4d:38:6f:b0:8d: 5b:71:df:91:52:15:fc:b6:59:91:12:42:63:e6:a7:0f:d3:29: 95:2b:86:21:2e:2a:59:31:b6:33:61:ae:a4:df:9c:cd:c0:6e: 15:94:4a:9a:04:6a:bf:3f:c1:6c:f4:16:30:94:7b:0d:75:66: b5:71:7b:a6:f6:4b:47:6b:c2:fd:32:37:be:cd:ab:99:c2:09: b6:50:02:ac:11:db:64:24:c5:f3:c9:7b:e7:b5:53:4d:da:7d: e4:e0:89:b9:dc:e7:1a:81:42:7f:ff:01:c9:fe:41:d7:da:1f: c9:8d:2e:37:91:c4:42:a6:05:b1:e4:96:93:94:19:14:09:5d: d0:66:a7:c9:8b:af:23:61:26:b1:db:fb:d7:1e:21:c9:5c:47: af:14:09:51:f7:6e:34:d6:59:2b:21:70:58:d2:95:55:e3:74: 2a:ca:44:52:19:15:b3:f8:4d:49:b2:1e:59:50:48:4d:e0:67: a9:69:27:f0:b8:3d:8b:5b:84:47:ad:17:6e:58:14:0d:c3:4d: 91:0e:6b:32 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUYZYo7kuDWc9LCYsnaPt+qnsCpoQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA2MjgxODUzMTVaFw0yNzA2MjcxODU4MTVaMDMxMTAvBgNV BAMTKDcwMTU5MUJBQTdEM0FBQjc1Mzk4OTVBMzQyQzEzNzg1RDk3MENCQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbVeZsSXFMrF1DVUVdhBnmkroE LYdJLmBoMtX/eibKovAUoO+jxVDuI77Gw0xC9gPC2jm1+uup09Pmljr16vLFgyhp S9QiWTxC+8YKXyK3GLGcOs272cmcX5bPWnI9hAYFBlHIopPvbh9+jeYCaPkPhbzM zt3746mxzSusjmfO2dUfseP2WAVz3nynRiJzlDbsQKlO0sB2+p5oyoPacKJeOmET 3TKKxZcZ8r2dZi3WCN2VcMqJxO7cH5RPuXoK47vOET/BYLdtJoRdcAwpHgq5UVYb jzUgR3C16+C8qe82J3CO/Wme9/UWX8XPTA6P1/j6Mdpva143/zLnjMQmaDctAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUcBWRuqfTqrdTmJWjQsE3hdlwy80wHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTM3MDcucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAq CmBEbDANBgkqhkiG9w0BAQsFAAOCAQEAHhsdJao3mwZakpJ5leo8j01/IGoDvdIB k3sDubfSge0MhMWPI3SpZQ9FrGwMbtOCnU04b7CNW3HfkVIV/LZZkRJCY+anD9Mp lSuGIS4qWTG2M2GupN+czcBuFZRKmgRqvz/BbPQWMJR7DXVmtXF7pvZLR2vC/TI3 vs2rmcIJtlACrBHbZCTF88l757VTTdp95OCJudznGoFCf/8Byf5B19ofyY0uN5HE QqYFseSWk5QZFAld0GanyYuvI2Emsdv71x4hyVxHrxQJUfduNNZZKyFwWNKVVeN0 KspEUhkVs/hNSbIeWVBITeBnqWkn8Lg9i1uER60XblgUDcNNkQ5rMg== -----END CERTIFICATE-----Generated at Fri Jul 10 16:10:36 2026 by rpki-client